
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ddqQ3EY_41Ipa3kZpUQmkQLW0c.roa
File: 6ddqQ3EY_41Ipa3kZpUQmkQLW0c.roa (raw, json)
Hash identifier: 3Tc1YAkdzJ18jGGhf7Q5eUWwEJtmzbq3ovWGBy6xnkY=
Subject key identifier: E9:D7:6A:43:71:18:FF:8D:48:A5:AD:E4:66:95:10:9A:44:0B:5B:47
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0F06
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ddqQ3EY_41Ipa3kZpUQmkQLW0c.roa
Signing time: Tue 10 Jun 2025 11:16:49 +0000
ROA not before: Tue 10 Jun 2025 11:16:49 +0000
ROA not after: Sat 23 May 2026 09:51:00 +0000
asID: 9605
IP address blocks: 1.74.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 12:08:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3846 (0xf06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 10 11:16:49 2025 GMT
Not After : May 23 09:51:00 2026 GMT
Subject: CN=E9D76A437118FF8D48A5ADE46695109A440B5B47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:28:d1:a5:28:6b:9b:da:1b:16:b0:2e:2d:
c9:93:f9:00:54:54:37:fe:d6:d2:ef:41:0b:a4:6f:
57:eb:13:7c:04:21:65:3e:e9:c6:f1:3a:2d:42:e2:
79:1d:7f:2a:db:69:c6:7c:d1:41:02:3c:a4:70:00:
cc:55:ff:23:22:ad:a1:2c:20:7e:91:87:05:00:3d:
8c:26:e7:d9:2c:21:a2:2e:62:72:f1:b8:fb:78:a0:
0e:f6:3c:9b:b1:31:c0:b3:f6:bc:48:85:4f:31:de:
5d:39:3c:20:15:71:2a:14:c7:bb:e6:01:43:22:70:
ae:91:cc:fc:f7:7c:b0:05:52:c7:4e:d8:84:75:10:
83:47:bd:c1:aa:c8:6d:49:68:04:19:2c:32:b4:70:
91:14:b1:61:dc:9c:b8:0a:be:d6:68:e9:41:2f:4a:
2f:d3:9e:bf:9f:ba:4e:ae:43:ed:b5:9f:f8:3e:ab:
c6:43:e4:f2:cf:b6:ed:e3:74:d6:de:ff:5c:c1:33:
9f:20:f6:50:e8:32:86:dc:d7:94:6d:8c:32:62:03:
c9:1f:78:65:de:fb:34:e2:48:99:45:8d:ab:45:bb:
dc:bd:58:00:76:ba:9e:b9:a2:e1:65:27:ab:9e:51:
2d:a6:4f:47:c9:a7:1b:ac:25:46:59:f7:e3:99:27:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D7:6A:43:71:18:FF:8D:48:A5:AD:E4:66:95:10:9A:44:0B:5B:47
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6ddqQ3EY_41Ipa3kZpUQmkQLW0c.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.74.200.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:5f:59:53:dd:4b:06:d0:2b:24:4d:8b:49:84:15:2c:8e:74:
62:2b:96:c5:eb:a4:27:41:dc:73:e4:92:eb:ec:31:e1:2f:7c:
98:82:42:ea:09:f8:11:f4:44:17:b1:00:ca:cb:ed:69:49:21:
80:ed:69:b3:0d:db:13:99:4e:d0:64:da:cc:df:45:3d:16:61:
e0:e3:b1:a9:f7:96:07:22:fe:97:7e:ae:02:32:4a:af:5e:b2:
92:25:6c:a2:f3:f1:b3:d8:b5:be:f3:e1:cf:47:fe:37:14:a6:
72:8e:5f:21:d6:c7:f7:2d:b9:b4:cb:c7:5d:a6:9b:d3:7d:ad:
ee:a8:d3:f7:9a:72:fe:cd:0c:37:5a:d6:b3:77:ac:b3:6b:a8:
60:8c:6a:6f:0c:91:f3:1b:17:50:dd:36:b9:81:cf:54:86:18:
b9:8e:0f:46:f6:c1:53:4a:9f:35:1a:ba:e8:37:38:fa:23:80:
bf:6e:aa:10:69:21:04:dd:0b:b3:61:2d:43:ad:b5:b9:6c:00:
98:3e:36:e4:14:ad:7e:2c:c6:d5:e8:6a:f1:a1:a2:9b:cc:4d:
3c:cc:0d:7b:01:79:c4:67:bc:75:18:7d:5e:7b:5e:c8:8b:36:
58:bb:52:24:f0:d7:ce:28:96:ca:01:65:2a:7a:7c:13:b4:35:
d0:6c:44:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 13:43:53 2025 by rpki-client